This attack could have been so, so much worse. We were saved by the attacker's lack of creativity and competence.

And the author's prompt response.